chore: prepare for trusted publishing + provenance (#301)

Allows token-less publishing.
See https://docs.npmjs.com/trusted-publishers

Enables provenance statements, see
https://docs.npmjs.com/generating-provenance-statements

---------

Co-authored-by: Simon Kobler <simon.kobler@sap.com>

Author: chgeo

.github/workflows/release.yml

@@ -5,6 +5,7 @@ on:
 
 permissions:
   contents: write
+  id-token: write
 
 jobs:
 
@@ -15,7 +16,7 @@ jobs:
     - uses: actions/checkout@v4
     - uses: actions/setup-node@v4
       with:
-        node-version: 20
+        node-version: 24
         registry-url: https://registry.npmjs.org/
 
     - name: Run Tests
@@ -39,6 +40,4 @@ jobs:
       with:
         tag: 'v${{ steps.package-version.outputs.current-version }}'
         body: '${{ steps.parse-changelog.outputs.body }}'
-    - run: npm publish --access public
-      env:
-        NODE_AUTH_TOKEN: ${{secrets.npm_token}}
+    - run: npm publish --access public --provenance 

.github/workflows/test.yml

@@ -37,6 +37,7 @@ jobs:
     - run: npm i
     - run: cd tests/incidents-app && npm i
     - run: npm run test
+    
   integration-tests:
     runs-on: ubuntu-latest
     needs: requires-approval